472 matches found
PT-2015-4860
Name of the Vulnerable Software and Affected Versions Cisco Conductor for Videoscape version 3.0 Cisco Headend System Release affected versions not specified Description The issue allows remote attackers to inject arbitrary cookies via a crafted HTTP request. Recommendations For Cisco Conductor f...
Cisco Conductor for Videoscape and Cisco Headend System Release HTTP Injection Vulnerability
A vulnerability in the Cisco Conductor for Videoscape and Cisco Headend System Releases could allow an unauthenticated, remote attacker to inject arbitrary HTTP cookies via an HTTP request. The vulnerability is due to improper input validation of an HTTP request header. An attacker could exploit...
Cisco TelePresence Conductor Login Security Bypass Vulnerability
According to its self-reported version number, the Cisco TelePresence Conductor on the remote host contains an vulnerability due to inadequate validation of parameters passed during the login process. A remote attacker, using a crafted request and knowledge of a valid user name, can bypass...
Cisco TelePresence Conductor SDP Media Description Vulnerability
According to its self-reported version number, the Cisco TelePresence Conductor on the remote host contains an vulnerability related to the Session Description Protocol SDP packet handler function. A remote, unauthenticated attacker, using a crafted SDP packet to trigger a reload, can exploit thi...
Authentication flaw
The management interface in Cisco TelePresence Video Communication Server VCS and Cisco Expressway before X7.2.4, X8 before X8.1.2, and X8.2 before X8.2.2 and Cisco TelePresence Conductor before X2.3.1 and XC2.4 before XC2.4.1 allows remote attackers to bypass authentication via crafted login...
CVE-2015-0653
CVE-2015-0653 affects Cisco TelePresence VCS/Expressway, Cisco TelePresence Conductor, and XC2.4-era components, where the management interfaces allow remote authentication bypass via crafted login parameters. The root cause is inadequate validation of login parameters, enabling an attacker with ...
CVE-2015-0652
CVE-2015-0652 affects Cisco TelePresence VCS, Cisco Expressway (before X8.2) and Cisco TelePresence Conductor (before XC2.4). The SDP packet handler vulnerability allows a remote, unauthenticated attacker to cause a denial of service (mishandled exception and device reload) via a crafted SDP medi...
CVE-2015-0652: Improper Input Validation
The Session Description Protocol SDP implementation in Cisco TelePresence Video Communication Server VCS and Cisco Expressway before X8.2 and Cisco TelePresence Conductor before XC2.4 allows remote attackers to cause a denial of service mishandled exception and device reload via a crafted media...
PT-2015-4781
Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS versions prior to X8.2 Cisco Expressway versions prior to X8.2 Cisco TelePresence Conductor versions prior to XC2.4 Description The issue is related to the Session Description Protocol SDP...
CVE-2015-0653: Improper Authentication
The management interface in Cisco TelePresence Video Communication Server VCS and Cisco Expressway before X7.2.4, X8 before X8.1.2, and X8.2 before X8.2.2 and Cisco TelePresence Conductor before X2.3.1 and XC2.4 before XC2.4.1 allows remote attackers to bypass authentication via crafted login...
Cisco TelePresence VCS and Conductor SDP Message Denial of Service Vulnerability
Cisco TelePresence is a telepresence conferencing solution developed by Cisco.Cisco Expressway is a video conferencing application. A security vulnerability in Cisco TelePresence VCS and Conductor SDP message handling allows attackers to exploit the vulnerability to submit special IPv4 or IPv6v6...
PT-2015-1313
Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS versions prior to X7.2.4 Cisco TelePresence Video Communication Server VCS versions X8 prior to X8.1.2 Cisco TelePresence Video Communication Server VCS versions X8.2 prior to X8.2.2 Cisco...
Multiple Vulnerabilities in Cisco TelePresence Video Communication Server, Cisco Expressway, and Cisco TelePresence Conductor
Cisco TelePresence Video Communication Server VCS, Cisco Expressway and Cisco TelePresence Conductor contain the following vulnerabilities: SDP Media Description Denial of Service Vulnerability Authentication Bypass Vulnerability Successful exploitation of the SDP Media Description Denial of...
Cisco TelePresence Conductor GNU glibc gethostbyname Function Buffer Overflow Vulnerability (GHOST)
According to its self-reported version number, the Cisco TelePresence Conductor remote device is affected by a heap-based buffer overflow vulnerability in the GNU C Library glibc due to improperly validating user-supplied input to the nsshostnamedigitsdots, gethostbyname, and gethostbyname2...
Cisco TelePresence Conductor WebUI Detection
Binary data ciscotelepresenceconductorwebuidetect.nbin...
Cisco TelePresence Conductor Detection
Binary data ciscotelepresenceconductordetect.nbin...
Cisco TelePresence Conductor Bash Remote Code Execution (Shellshock)
According to its self-reported version number, remote Cisco TelePresence Conductor device is affected by a command injection vulnerability in GNU Bash known as Shellshock. The vulnerability is due to the processing of trailing strings after function definitions in the values of environment...
Cisco TelePresence Conductor Default Credentials (Web UI)
It is possible to log into the remote Cisco TelePresence Conductor installation by providing the default credentials. A remote, unauthenticated attacker can exploit this to gain administrative control. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
